duntroon.school.nz

Issued by R11

About this certificate

This digital certificate with serial number 04:9f:3a:ed:a9:bf:71:c4:b4:70:cb:e1:f8:aa:38:54:5d:c9 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=duntroon.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9f:3a:ed:a9:bf:71:c4:b4:70:cb:e1:f8:aa:38:54:5d:c9
Serial Number (int): 402632369308476211816982483266105624518089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:fe:83:09:49:86:7e:64:27:ba:d2:31:e5:9e:63:ce:79:d4:14:16
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 90:29:d1:16:55:be:2e:8c:d1:7e:be:96:14:f6:e2:63:1a:61:3e:05
Fingerprint (sha256): b1:f4:76:08:d2:9b:3e:09:0c:b3:cd:dd:4b:20:0f:70:a1:e9:83:ee:5b:98:78:19:4a:75:66:b9:c1:3c:61:9a

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate duntroon.school.nz

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duntroon.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenton.school.skoolsites.co.nz
allentonschool.skoolsites.co.nz
bigrock.school.nz
cobden.school.nz
cpanel.skoolsites.co.nz
duntroon.school.nz
duvauchelle.school.nz
faircol.skoolsites.co.nz
hiwinuischool.skoolsites.co.nz
huntlycollege.school.nz
mangerekura.school.nz
maromaku.school.nz
mayfield.school.nz
mtbiggs.skoolsites.co.nz
northlandcollege.skoolsites.co.nz
nsc.school.nz
opotikicol.school.nz
otocoll.school.nz
parkvale.school.nz
practiceschool.skoolsites.co.nz
rangi.school.nz
saintmarks.skoolsites.co.nz
skoolsites.co.nz
solwayprimary.skoolsites.co.nz
stjohnsgirls.school.nz
stjosephsdvke.school.nz
stleos.school.nz
taitacentral.school.nz
taitoko.school.nz
tehaukaretu.school.nz
templatetwo.skoolsites.co.nz
terangianiwaniwa.school.nz
tikorangi.school.nz
tokomaru.school.nz
totara.skoolsites.co.nz
waikaretu.school.nz
waiotahe.school.nz
waiotahevalley.skoolsites.co.nz
waitakereprimary.school.nz
waitoki.skoolsites.co.nz
wakanui.school.nz
wakari.school.nz
walton.school.nz
ward.school.nz
waverlypark.school.skoolsites.co.nz
westendnp.school.nz
www.allenton.school.skoolsites.co.nz
www.allentonschool.skoolsites.co.nz
www.bigrock.school.nz
www.cobden.school.nz
www.duntroon.school.nz
www.duvauchelle.school.nz
www.faircol.skoolsites.co.nz
www.hiwinuischool.skoolsites.co.nz
www.huntlycollege.school.nz
www.mangerekura.school.nz
www.maromaku.school.nz
www.mayfield.school.nz
www.mtbiggs.skoolsites.co.nz
www.northlandcollege.skoolsites.co.nz
www.nsc.school.nz
www.opotikicol.school.nz
www.otocoll.school.nz
www.parkvale.school.nz
www.practiceschool.skoolsites.co.nz
www.rangi.school.nz
www.saintmarks.skoolsites.co.nz
www.skoolsites.co.nz
www.solwayprimary.skoolsites.co.nz
www.stjohnsgirls.school.nz
www.stjosephsdvke.school.nz
www.stleos.school.nz
www.taitacentral.school.nz
www.taitoko.school.nz
www.tehaukaretu.school.nz
www.templatetwo.skoolsites.co.nz
www.terangianiwaniwa.school.nz
www.tikorangi.school.nz
www.tokomaru.school.nz
www.totara.skoolsites.co.nz
www.waikaretu.school.nz
www.waiotahe.school.nz
www.waiotahevalley.skoolsites.co.nz
www.waitakereprimary.school.nz
www.waitoki.skoolsites.co.nz
www.wakanui.school.nz
www.wakari.school.nz
www.walton.school.nz
www.ward.school.nz
www.waverlypark.school.skoolsites.co.nz
www.westendnp.school.nz
www.zayedcollege.school.nz
zayedcollege.school.nz

Other certificates including the domain name duntroon.school.nz

(limited to 100 certificates)
skoolsites.co.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
templatetwo.skoolsites.co.nz
skoolsites.co.nz
www.waitakereprimary.school.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
www.cobdenprimary.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mangerekura.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
taitoko.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
duntroon.school.nz
skoolsites.co.nz
cpanel.skoolsites.co.nz
skoolsites.co.nz
terangianiwaniwa.school.nz
skoolsites.co.nz
skoolsites.co.nz

Certificate

The complete raw certificate details for duntroon.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxzGttj8+1QXIDrJM24a
OolI2xLvKagfAm+I7oN3qndX8DJXU9j35DA6rPv5cRO/HW5zYiVW+hIM9/aHkLUd
HtApbaWdlSHuTTLfMKarwVZ/BZsQm0L85DFMdiLmvXAG4jI4nUM3tSAqFxSmaqRm
BWL3Ju9IeVSTE459y6xsqb+tNAObwvw1njwyJKTneHsnQp2rUnL+Y2YyGMbHTVdp
g7renwE/H/2+XygsN0vrocJ+gy2sYz4ROd/nC5VzqVpAmjRcIM4CZYOGSZCVwDeB
AldU3GxIMNG6LRvoOmOHn+QNrZqgokGI97X18nBNqDkIDtu2UMBUAZZY+nfc6/ds
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402632369308476211816982483266105624518089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 01:08:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-16 01:08:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duntroon.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25135612774914017422941318448074100737216271973114599452392570614465981654978718612943358625636846664913690466053330653984591831860671630294280212246989512855895164137062772773407566091384425096837722328217018512544119108095518253209266989705306853393682139443269190497346732781837268260677581920496336476456754095042124819755159293075593148081940424041824010937194651845639265694139108905819536126090904583119967397302875858614318963842217535381984985186227858488425250350226495969761017662789204189083423020879084438376362370231323705833762494907617495392786202832274507476931286242358925672224824640127100930976999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dffe830949867e6427bad231e59e63ce79d41416
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobden.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangerekura.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitoko.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terangianiwaniwa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikorangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahe.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakari.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zayedcollege.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000190291a4e5b0000040300473045022100bc7b4ea45f5f3b809963b0d1de49106b1bde5a9daf18c8816827cc006e9847e502201e3faa8933ab1dac26366bce92855e118a20b9c95c00948057b04a61e46af9380077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190291a4e800000040300483046022100aec4a9d359cc7ecc5b610b8700ccd848107056b660ca4b7c0fa8a0983b66fe8a022100848e437e18e61abd6e7400e4babee91f73b476b6790395c3a4a922c74fc5f82f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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